Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/aDypzKqVJB4PYnrsyTU9_dvV30g.asa
File:                     aDypzKqVJB4PYnrsyTU9_dvV30g.asa (raw, json)
Hash identifier:          rvB4xEs5DXyeCTjOwk985TVxd77qlnyyyqCO8RsXNLo=
Subject key identifier:   68:3C:A9:CC:AA:95:24:1E:0F:62:7A:EC:C9:35:3D:FD:DB:D5:DF:48
Certificate issuer:       /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial:       019EB29FB5783E6006E543F8C80173F478A9
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/aDypzKqVJB4PYnrsyTU9_dvV30g.asa
Signing time:             Wed 10 Jun 2026 17:41:11 +0000
ASPA not before:          Wed 10 Jun 2026 17:41:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202118
Providers:                AS: 47311
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b2:9f:b5:78:3e:60:06:e5:43:f8:c8:01:73:f4:78:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
        Validity
            Not Before: Jun 10 17:41:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=683ca9ccaa95241e0f627aecc9353dfddbd5df48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:2d:90:82:1e:17:47:36:b4:13:a5:02:10:
                    f0:c2:a7:7b:33:69:a9:27:e5:09:ce:fa:18:96:8c:
                    db:f4:7c:a9:c6:c7:85:0f:db:59:08:8e:a6:4d:5b:
                    93:08:14:26:14:ea:9f:3b:bc:e3:3c:f5:a4:a1:fe:
                    93:4d:ab:76:74:04:53:2c:da:18:d3:3b:07:f1:3a:
                    17:d6:55:3e:06:1c:5b:2b:e4:a1:04:fb:7d:f3:c5:
                    30:90:a9:7f:d3:b8:3f:f0:06:13:62:ac:b1:25:0c:
                    41:ad:66:f9:29:43:c8:9f:f6:8f:cf:09:cd:0d:26:
                    8d:45:52:36:f3:53:8a:5c:07:e4:61:0a:50:7d:02:
                    b7:82:0b:19:36:21:dc:03:56:87:7b:42:dd:c7:c9:
                    8c:75:ae:ed:09:b2:7f:de:f8:a4:1e:a3:bf:de:b6:
                    66:8e:c4:8b:2d:d8:e4:e0:8b:24:c0:7a:f3:de:0b:
                    4b:39:79:6b:11:0b:b5:3c:92:5c:ba:fb:2f:23:18:
                    d1:69:b2:2c:9e:09:c9:53:22:f0:38:42:fe:86:99:
                    7d:5a:b1:c7:08:65:3d:78:55:0d:42:7f:7e:06:a3:
                    15:f8:4a:e0:ac:f3:24:18:e0:b9:9a:b1:91:3f:e4:
                    e2:c0:11:8d:a2:43:b2:8a:00:b4:4f:65:a6:fd:08:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:A9:CC:AA:95:24:1E:0F:62:7A:EC:C9:35:3D:FD:DB:D5:DF:48
            X509v3 Authority Key Identifier:
                keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/aDypzKqVJB4PYnrsyTU9_dvV30g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202118

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:8f:46:96:70:80:1c:aa:ea:11:be:15:e6:c5:80:ea:37:
         a7:3c:3c:24:ff:82:db:04:57:3a:39:75:5f:ea:41:ed:b0:59:
         22:fa:86:6a:9b:8c:08:46:e2:6a:c1:82:f2:7f:60:ef:70:a5:
         e9:22:ce:39:5b:6e:33:cb:6f:26:47:3f:06:a1:bc:88:cb:1c:
         6e:42:39:50:f7:aa:1d:22:b9:99:b7:b7:b1:67:7f:08:d3:67:
         96:07:9e:5f:e1:2c:41:81:28:4f:37:a7:c7:96:c5:98:88:eb:
         93:7d:98:4f:20:32:21:af:a4:ce:ff:19:51:65:1c:b0:4e:40:
         74:f0:79:f8:f0:ee:ac:1c:b0:1c:d3:4c:ff:77:52:90:c4:ed:
         9e:69:4c:c7:16:b0:4a:71:ac:35:8a:f8:c9:2b:5d:22:df:0f:
         e4:22:00:1c:c8:3b:16:71:49:37:40:34:77:57:f2:d6:74:05:
         9c:21:34:5c:58:48:97:57:57:08:bc:2e:0b:df:b9:e6:fa:97:
         8c:66:3c:98:31:cb:13:f1:b8:4b:16:27:f2:a0:3c:26:85:30:
         62:fc:a0:fe:b1:2d:d0:48:45:1b:dc:88:be:73:f6:89:28:e9:
         d0:89:c3:ab:c1:c4:90:6b:93:4c:4a:9d:8d:43:5d:09:12:e7:
         ef:32:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:03 2026 by rpki-client